Сам радиус-сервер запускается без ошибок в логах:
Mon Apr 8 22:13:48 2013 : Info: Exiting normally.
Mon Apr 8 22:13:49 2013 : Info: Loaded virtual server inner-tunnel
Mon Apr 8 22:13:49 2013 : Info: Loaded virtual server <default>
Mon Apr 8 22:13:49 2013 : Info: Ready to process requests.
Настройки циски:
TTAS5350#sh run | inc aaa
aaa new-model
aaa authorization exec h323 group radius local
aaa authorization exec sip group radius local
aaa authorization network default group radius local
aaa authorization network h323 group radius local
aaa accounting delay-start
aaa accounting exec default start-stop group radius
aaa accounting exec h323 start-stop group radius
aaa accounting exec sip start-stop group radius
aaa accounting network default start-stop group radius
aaa accounting network h323 start-stop group radius
aaa accounting network sip start-stop group radius
aaa accounting connection h323 start-stop group radius
aaa accounting connection sip start-stop group radius
aaa nas port extended
aaa session-id common
gw-accounting aaa
TTAS5350#
TTAS5350#sh run | inc radius
aaa authorization exec h323 group radius local
aaa authorization exec sip group radius local
aaa authorization network default group radius local
aaa authorization network h323 group radius local
aaa accounting exec default start-stop group radius
aaa accounting exec h323 start-stop group radius
aaa accounting exec sip start-stop group radius
aaa accounting network default start-stop group radius
aaa accounting network h323 start-stop group radius
aaa accounting network sip start-stop group radius
aaa accounting connection h323 start-stop group radius
aaa accounting connection sip start-stop group radius
ip radius source-interface FastEthernet0/0
radius-server host 78.87.208.118 auth-port 1812 acct-port 1813
radius-server timeout 30
radius-server key 7 10491D54261E210823493A2A373B
radius-server vsa send accounting
Но циска логирует что радиус не в поряде:
TTAS5350#
Apr 9 07:44:54.103: RADIUS: acct-timeout for 41BE6E50 now 30, acct-jitter 4294967291, acct-delay-time (at 41BE72A0) now 25
Apr 9 07:44:54.103: RADIUS: Retransmit to (78.87.208.118:1812,1813) for id 1646/12
Apr 9 07:44:56.663: RADIUS: acct-timeout for 4008434C now 30, acct-jitter 4294967294, acct-delay-time (at 4008476B) now 28
Apr 9 07:44:56.663: RADIUS: Retransmit to (78.87.208.118:1812,1813) for id 1646/13
Apr 9 07:44:57.719: RADIUS: acct-timeout for 4007FF74 now 30, acct-jitter 4294967294, acct-delay-time (at 400803C3) now 28
Apr 9 07:44:57.719: RADIUS: Retransmit to (78.87.208.118:1812,1813) for id 1646/14
Apr 9 07:44:59.223: RADIUS: acct-timeout for 402FDA44 now 89, acct-jitter 4294967293, acct-delay-time (at 402FDD21) now 86
Apr 9 07:44:59.223: RADIUS: Retransmit to (78.87.208.118:1812,1813) for id 1646/15
Apr 9 07:44:59.287: RADIUS: acct-timeout for 41BE0370 now 30, acct-jitter 4294967295, acct-delay-time (at 41BE079A) now 29
Apr 9 07:44:59.287: RADIUS: Retransmit to (78.87.208.118:1812,1813) for id 1646/16
Apr 9 07:45:01.715: RADIUS: acct-timeout for 40050844 now 55, acct-jitter 0, acct-delay-time (at 40050AC7) now 55
Apr 9 07:45:01.715: RADIUS: Retransmit to (78.87.208.118:1812,1813) for id 1646/17
Apr 9 07:45:01.971: RADIUS: acct-timeout for 4003CC4C now 88, acct-jitter 0, acct-delay-time (at 4003CECE) now 88
Apr 9 07:45:01.971: RADIUS: Retransmit to (78.87.208.118:1812,1813) for id 1646/18
Apr 9 07:45:02.131: RADIUS: acct-timeout for 40312984 now 30, acct-jitter 4294967292, acct-delay-time (at 40312C56) now 26
Apr 9 07:45:02.131: %RADIUS-4-RADIUS_DEAD: RADIUS server 78.87.208.118:1812,1813 is not responding.
Apr 9 07:45:02.131: %RADIUS-4-RADIUS_ALIVE: RADIUS server 78.87.208.118:1812,1813 has returned.
Apr 9 07:45:02.131: RADIUS: Retransmit to (78.87.208.118:1812,1813) for id 1646/19
Apr 9 07:45:02.355: RADIUS: acct-timeout for 421C5C14 now 56, acct-jitter 0, acct-delay-time (at 421C5EE6) now 56
Apr 9 07:45:02.355: RADIUS: Retransmit to (78.87.208.118:1812,1813) for id 1646/20
TTAS5350#
Apr 9 07:45:04.019: RADIUS: acct-timeout for 4002F5AC now 30, acct-jitter 4294967294, acct-delay-time (at 4002F82F) now 28
Apr 9 07:45:04.019: RADIUS: Retransmit to (78.87.208.118:1812,1813) for id 1646/21
Apr 9 07:45:06.163: RADIUS: acct-timeout for 421BFE4C now 119, acct-jitter 0, acct-delay-time (at 421C029C) now 119
Apr 9 07:45:06.163: RADIUS: No response from (78.87.208.118:1812,1813) for id 1646/8
Apr 9 07:45:06.163: RADIUS/DECODE: No response from radius-server; parse response; FAIL
Apr 9 07:45:06.163: RADIUS/DECODE: Case error(no response/ bad packet/ op decode);parse response; FAIL
Apr 9 07:45:06.195: RADIUS: acct-timeout for 4004B434 now 119, acct-jitter 0, acct-delay-time (at 4004B853) now 119
Apr 9 07:45:06.195: RADIUS: No response from (78.87.208.118:1812,1813) for id 1646/9
Apr 9 07:45:06.195: RADIUS/DECODE: No response from radius-server; parse response; FAIL
Apr 9 07:45:06.195: RADIUS/DECODE: Case error(no response/ bad packet/ op decode);parse response; FAIL
А я не могу понять в чем проблема, потому что все как советует автор...
- Код: Выделить всё
preprocess {
with_cisco_vsa_hack = yes
}
acct_unique {
key = "h323-incoming-conf-id"
}
preacct {
preprocess
acct_unique
}
Это ведь надо вставить в radiusd.conf ? В любом месте...
А это в /etc/freeradius/sql.conf :
- Код: Выделить всё
accounting_stop_query = "UPDATE ${acct_table2} SET AcctStopTime = '%S', \
AcctSessionTime = '%{Acct-Session-Time}', \
AcctInputOctets = '%{Acct-Input-Octets}', \
AcctOutputOctets = '%{Acct-Output-Octets}', \
AcctTerminateCause = '%{h323-disconnect-cause}', \
AcctStopDelay = '%{Acct-Delay-Time}', \
ConnectInfo_stop ='%{Connect-Info}', \
`remote-address`='%{h323-remote-address}', \
`hopcount`='%{iphop[0]}', \
`hop1`='%{iphop[1]}', \
`hop2`='%{iphop[2]}' \
WHERE AcctSessionId = '%{Acct-Session-Id}' \
AND UserName = '%{SQL-User-Name}' \
AND NASIPAddress = '%{NAS-IP-Address}'"
В sql {
}
Пароль и Логин к БД можно указать рута ? или должен быть именно юзер radius , и БД radius.
Ну и как вывести потом в веб ?
